chore(deps): update maven deps

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
com.github.jsqlparser:jsqlparser	4.9 → 5.3
com.google.code.gson:gson	2.13.2 → 2.14.0
com.google.errorprone:error_prone_annotations (source)	2.47.0 → 2.50.0
com.google.guava:guava	33.5.0-android → 33.6.0-jre
net.bytebuddy:byte-buddy-agent (source)	1.18.4 → 1.18.11-jdk5
ognl:ognl (source)	3.4.10 → 3.4.11
org.jacoco:org.jacoco.core (source)	0.8.14 → 0.8.15
org.mockito:mockito-core	5.21.0 → 5.23.0
org.ow2.asm:asm (source)	9.9.1 → 9.10.1
org.ow2.asm:asm-commons (source)	9.9.1 → 9.10.1
org.ow2.asm:asm-tree (source)	9.9.1 → 9.10.1

---

Release Notes

google/error-prone (com.google.errorprone:error_prone_annotations)

v2.50.0: Error Prone 2.50.0

Compare Source

New checks:

• BoxingComparator: Detect implicitly-boxing Comparator.comparing key extractors
• ExposedPrivateType: Discourage references to private member classes from non-private APIs
• JUnitMethodInvoked: Discourage directly invoking JUnit test methods
• ListRemoveAmbiguous: Detect ambiguous calls to List.remove(int|Integer)
• PreferTestParameter: suggests using @TestParameter instead of @TestParameters for exhaustive boolean and enum parameters on single-element parameterized tests
• RecordComponentAccessorAnnotationConflict: Detect conflicts between record components and explicit accessor methods
• RecordComponentOverride: Discourage @Override on record component declarations that don't override
  anything
• ThrowableEqualsHashCode: Discourage overriding Throwable.equals() and hashCode()

Closed issues: #​5553, #​5649, #​5778

Full changelog: google/error-prone@v2.49.0...v2.50.0

v2.49.0: Error Prone 2.49.0

Compare Source

This release includes several changes to Matcher APIs, and removed some deprecated or problematic APIs:

• Remove deprecated MethodMatchers.withSignature API, which relies on fragile toString behaviour. Alternatives for matching on method signatures with varargs and type parameters were added in a98a1c5.
• Removed variableType(Matcher) API. Matchers.variableType(Matcher) uses VariableTree#getType to match variable types, which own't work for lambda parameters with inferred types after JDK-8268850. The recommended replacement is variableType(TypePredicate).
• Make enclosingPackage return an optional. Module elements are not enclosed by a package, checks using enclosingPackage shouldn't assume an enclosing package exists when processing arbitrary elements.
• New FieldMatchers API, similar to MethodMatchers (1dd9c3a).

New checks:

• AssertThrowsBlockToExpression: Discourage unnecessary block lambdas in assertThrows.
• AssertThrowsMinimizer: Suggest minimizing the amount of logic in assertThrows.
• MemorySegmentReferenceEquality: Discourage using reference equality for MemorySegments.
• PreferThrowsTag: Recommends using @throws instead of the legacy @exception javadoc tag.
• RecordAccessorInCompactConstructor: detect record accessors inside the compact canonical ctors, which read uninitialized fields.

Closed issues: #​2283, #​3503, #​5210, #​5289, #​5548, #​5548, #​5554, #​5609, #​5614, #​5656

Full changelog: google/error-prone@v2.48.0...v2.49.0

v2.48.0: Error Prone 2.48.0

Compare Source

Changes:

• Added support for passing flags with command-line argument files (@-files) (8e84edf)

New checks:

• AvoidValueSetter
• UnnecessarySemicolon

Closed issues: #​5529, #​5537, #​5522, #​5521

Full changelog: google/error-prone@v2.47.0...v2.48.0

raphw/byte-buddy (net.bytebuddy:byte-buddy-agent)

v1.18.11

• Add SBOM to published artifacts.
• Check for traversable paths injected into class files as a rather hypothetical attack vector.

v1.18.10

• Delay change of default for unsage use to Java 26 and improve error message.

v1.18.9

• Disable use of Unsafe by default when Java 25or newer is discovered.
• Check for escape when creating folders in Plugin.Engine.
• Improve OpenJ9 attachment.
• Avoid null pointer on missing annotation types.
• Improve diagnostics for external agent attachment.
• Improve on Gradle context discovery.
• Support Android libraries on AGP9 or newer.
• Update ASM.

v1.18.8

• Improve support for repeatable builds.
• Fix reordering of exception table in type initializers when instrumenting.

v1.18.7

• Introduce new versioning concept with -jdk5 suffix for backwards-compatible jar and Java 8 baseline for regular jar.

v1.18.5

• Eagerly resolve of canonical files during attach emulation to avoid failure when process ends before file can be deleted.
• Add super classes to hash code / equals computation in Advice that were missing.

jacoco/jacoco (org.jacoco:org.jacoco.core)

v0.8.15

mockito/mockito (org.mockito:mockito-core)

v5.23.0

Compare Source

NOTE: Breaking change for Android

The mockito-android artifact has a breaking change: tests now require a device or emulator based on API 28+ (Android P). This is to enable new support for mocking Kotlin classes. See #​3788 for more details.

---

^{Changelog generated by Shipkit Changelog Gradle Plugin}

5.23.0

• 2026-03-11 - 6 commit(s) by Brice Dutheil, Joshua Selbo, Philippe Kernevez
• Replace mockito-android mock maker implementation with dexmaker-mockito-inline (#​3792)
• Fix StackOverflowError with AbstractList after using mockSingleton (#​3790)
• Mark parameters of Mockito.when @Nullable (#​3503)

v5.22.0

^{Changelog generated by Shipkit Changelog Gradle Plugin}

5.22.0

• 2026-02-27 - 6 commit(s) by Joshua Selbo, NiMv1, Rafael Winterhalter, dependabot[bot], eunbin son
• Avoid mocking of internal static utilities (#​3785)
• Bump graalvm/setup-graalvm from 1.4.4 to 1.4.5 (#​3780)
• Static mocking of UUID.class corrupted under JDK 25 (#​3778)
• Bump actions/upload-artifact from 5 to 6 (#​3774)
• docs: clarify RETURNS_MOCKS behavior with sealed abstract enums (Java 15+) (#​3773)
• Add tests for Sets utility class (#​3771)
• Add core API to enable Kotlin singleton mocking (#​3762)
• Stubbing Kotlin object singletons (#​3652)
• Incorrect documentation for RETURNS_MOCKS (#​3285)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.